Automated cross account DNS management through CFN and API access through API gateway

Fri, 27 Nov 2015 09:57:13 +0000

It’s a general best practice to manage all DNS entries in Route53 in a centralized AWS account. In that case it is difficult to automate the DNS record creation/deletion based on resources created in another AWS account using CloudFormation. CloudFormation doesn’t yet have the capability to create resources in a different AWS account.

Combining IAM role delegation, AWS Lambda & CFN Custom resources provides us a solution. I have extended the same solution by exposing the Lambda function through API gateway which provides a powerful mechanism. The illustration give below explains the solution.

API Gateway on Technology Enlightened

Automated cross account DNS management through CFN and API access through API gateway